Количество 2
Количество 2
CVE-2013-4660
больше 12 лет назад
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.
CVSS2: 6.8
EPSS: Средний
GHSA-xxvw-45rp-3mj2
около 8 лет назад
Deserialization Code Execution in js-yaml
EPSS: Средний
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-4660 The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation. | CVSS2: 6.8 | 65% Средний | больше 12 лет назад |
| GHSA-xxvw-45rp-3mj2 Deserialization Code Execution in js-yaml | 65% Средний | около 8 лет назад |
Уязвимостей на страницу
20